aws-cdk-lib.aws_glue.CatalogEncryptionOptions

CatalogEncryptionOptions Struct

Encryption configuration for a Glue Data Catalog.

Encryption is fixed at construction: a catalog either carries encryption settings or it does not, which keeps its configuration easy to reason about and avoids order-dependent mutation after the catalog is created.

Source

aws-glue/lib/catalog.ts

Type last changed

v2.270.0 · 17 Sep 2026

Example

import * as iam from 'aws-cdk-lib/aws-iam';
declare const key: kms.Key;
declare const role: iam.IRole;
glue.Catalog.encryptAccount(this, {
  encryptionAtRest: glue.DataCatalogEncryptionAtRest.kmsWithServiceRole(role, key),
});

Properties

connectionPasswordEncryptionConnectionPasswordEncryptionconnection_password_encryptionConnectionPasswordEncryptionconnectionPasswordEncryptionConnectionPasswordEncryptionConnectionPasswordEncryptionConnectionPasswordEncryptionConnectionPasswordEncryptionConnectionPasswordEncryption= connection-password encryption i…#

Connection-password encryption configuration for the catalog.

default

Default: connection-password encryption is not managed by CDK

encryptionAtRestDataCatalogEncryptionAtRestencryption_at_restDataCatalogEncryptionAtRestencryptionAtRestDataCatalogEncryptionAtRestEncryptionAtRestDataCatalogEncryptionAtRestEncryptionAtRestDataCatalogEncryptionAtRest= encryption at rest is not manage…#

Encryption-at-rest configuration for the catalog.

default

Default: encryption at rest is not managed by CDK (the catalog default applies)